Analysis

  • max time kernel
    3815665s
  • max time network
    172s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220310-en
  • submitted
    20-05-2022 21:42

General

  • Target

    f122cf746998345a5f97fdab4165478694745637e4f4751602f83b04eee7bcec.apk

  • Size

    5.9MB

  • MD5

    cf01dbe52db9ed9cf0e8a125edcf6991

  • SHA1

    5310ccef2fe013ee6024e1d509daee3daff8d12c

  • SHA256

    f122cf746998345a5f97fdab4165478694745637e4f4751602f83b04eee7bcec

  • SHA512

    ad56851d404fac0f14bc3a2a3021a29ac9d12e8cd3061db785a16a669169bdc0b05139cc38f0a260cdf06d1655c15e3858be28ae4135740bf53897073daa4d2c

Score
7/10

Malware Config

Signatures

  • Queries the unique device ID (IMEI, MEID, IMSI).
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.br.pizzamaker
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:6923
  • com.br.pizzamaker:Metrica
    1⤵
      PID:6999

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.br.pizzamaker/files/ZPkFS.log

      Filesize

      90B

      MD5

      003943ff214848f3f1ca86502cb45f17

      SHA1

      65a6ce728efcac23b02f09a941ea5a45eff8b6b2

      SHA256

      ea6f8eb80a2c295ac88f68f0814f61710c829910c35cf793084f38dd6b31d475

      SHA512

      1e4d2645f5cc09de95c3ee4c2c22b3791b36f7af4ad06b2440938aa9ec7db4c54b0438021eec9f6fad4bc627678f88432affc23380d3e792bbf058b9eea555e1

    • /data/user/0/com.br.pizzamaker/files/credentials.dat

      Filesize

      233B

      MD5

      729138a392894281c2d22b95749cae6d

      SHA1

      a724052d922f50df84f9b1fe213839ed2c0e52a6

      SHA256

      8d93cc45c9f6390441215fe907eb7820004e8661d8afbea2ea7a44a8e6a3f40c

      SHA512

      07e862d813b31db7ddd6b70821ba9ceb133c437804e78ff95f9c48a035c1bff4b14447fd05a243db5de06caf6ee16aad199bbaaa65000ef26310e002c39d0e1b

    • /data/user/0/com.br.pizzamaker/files/metrica_client_data.db.lock

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.br.pizzamaker/no_backup/credentials.dat

      Filesize

      233B

      MD5

      729138a392894281c2d22b95749cae6d

      SHA1

      a724052d922f50df84f9b1fe213839ed2c0e52a6

      SHA256

      8d93cc45c9f6390441215fe907eb7820004e8661d8afbea2ea7a44a8e6a3f40c

      SHA512

      07e862d813b31db7ddd6b70821ba9ceb133c437804e78ff95f9c48a035c1bff4b14447fd05a243db5de06caf6ee16aad199bbaaa65000ef26310e002c39d0e1b

    • /data/user/0/com.br.pizzamaker/no_backup/db_metrica_com.br.pizzamaker

      Filesize

      1.2MB

      MD5

      fdc6de249275fa13c12cb344699de85a

      SHA1

      2cf524cc6ea5299d9451e47399675d188432feb8

      SHA256

      4578208f55c91a5215376040389ac8b9088690c48facd40d16a410d5a942d4c6

      SHA512

      e73a10777b92e123948ef8569da1f05d8862be96e11a450a43357b2c967f17528ab0277c1d3495317e7b1812eb465e01845ba37f5eac4b7734b508fc05d25cd7

    • /data/user/0/com.br.pizzamaker/no_backup/db_metrica_com.br.pizzamaker-journal

      Filesize

      1KB

      MD5

      0c69f44da0b8ca1a0fbb2f6981e442a0

      SHA1

      a1e1b6d2bb0e60b8e9a4d08099c986f4c7ea3f21

      SHA256

      9e6d20e64859043918262b93ffb607d949b77b684a4a4467d9937ba4f8a9edad

      SHA512

      c8d24e83a34c4fbfaeadc2abae7ec128f3d4ecbf12e433daf2b3e9cb9bfb191202ca7477ff5d5af7fce880ad7bdb1a03a7c7e6f62e031717dc3045ca733d24de

    • /data/user/0/com.br.pizzamaker/no_backup/db_metrica_com.br.pizzamaker_20799a27-fa80-4b36-b2db-0f8141f24180

      Filesize

      400KB

      MD5

      c8dcb1137511359be57810479a762f23

      SHA1

      a5acfb9da205f0249b783946d7013e22535e8661

      SHA256

      f7088911383b6861bd1b86c826c15897e06b8ccc655d4389bdd7233786ca2799

      SHA512

      3f3654de9f7e9b8f3ddc2f1cee339fc600675cf141260e84d8e3267558543ad963cc287268112b15b7ebd8d5479ed603a3a9084553ddc7a2e539a89b1f1b7248

    • /data/user/0/com.br.pizzamaker/no_backup/db_metrica_com.br.pizzamaker_20799a27-fa80-4b36-b2db-0f8141f24180-journal

      Filesize

      1KB

      MD5

      9fa1a7ff726eec699eb9e5fe763faaaa

      SHA1

      cb3fc2b1901f7d9badaf141f53ddac4a5f31ede7

      SHA256

      88b379c29df3574430d213f629be26cd054696d85a50c5458aaefeb87b5be7a2

      SHA512

      9298bab5d975b78b4802cbc678a3369c1dcabcd2e9e64c4405017afb50bf3cf988baaf6a89a8053a71241999d8b35f2bfad985123ea7803801b6d3e148de89b4

    • /data/user/0/com.br.pizzamaker/no_backup/metrica_client_data.db

      Filesize

      72KB

      MD5

      9a3a3b75fccfd0f867aa701a3bcc1680

      SHA1

      a9502f26a77a0073cdc1e7db61c3163b2b99582b

      SHA256

      dad6e81e21c686e9f565f1566d67f150135334644af3b4db184e01331cf2a905

      SHA512

      8f3b3458a40628d469d7ea1cb8388b1a73bada8b6e30309cca48d1066d14f80d0d3f55953977a4b3e98a31c8ed421845691e4784a96419d72867d92faab66dec

    • /data/user/0/com.br.pizzamaker/no_backup/metrica_client_data.db-journal

      Filesize

      1KB

      MD5

      5130ebbbbd6d14c7eea6445655654cc3

      SHA1

      81f587e8f655532b477dcf2a13489ab349cd1298

      SHA256

      00e02a308ef9909f66e086919bce8e33d4c4796060073aa7d40db05b2c7b6c83

      SHA512

      fc0c53210f4170c6c0abd46fdf25a236ba939d84d64a3145091fcaee55c10fde05ae3b5045d23d523966e473378a14ff7d3874262614dae0afe7c5314cbce516

    • /data/user/0/com.br.pizzamaker/no_backup/metrica_data.db

      Filesize

      1.2MB

      MD5

      5a697b00c7663327410060ceba1e843d

      SHA1

      13eb62fddd79176167c5b1f1bb9b3889a578ca03

      SHA256

      2ace3c16bc49566bf2617d6768dc1e1239064c666e25ed51958a28892f1bac37

      SHA512

      841219359843dc45e2604593c008b1a5d3edd015a2a1fe6b9d6227088b2140180c9d4fe991c420cd1b9f9a6b566085311702619327371cf1ababdee4687ed297

    • /data/user/0/com.br.pizzamaker/no_backup/metrica_data.db-journal

      Filesize

      1KB

      MD5

      74585a54a1a1d6045df12348f64e020f

      SHA1

      cc1bbf1815cc4744d631d519a8ed6c9d5220bad7

      SHA256

      ee58d1e962066388f4f1ca0d0f86eb0c1908e107be0942f61680277b66df8614

      SHA512

      d60859113d3409ede34433e42e542c551bbf2ee0bcb7a19d546f26ff2b6a0a4b285d6f2f718d6c9d98093c7b38f44e3c4d9a216fd8ce2bfd3615841ebe21d7b3

    • /data/user/0/com.br.pizzamaker/shared_prefs/com.br.pizzamaker_migrationpreferences.xml

      Filesize

      65B

      MD5

      9781ca003f10f8d0c9c1945b63fdca7f

      SHA1

      4156cf5dc8d71dbab734d25e5e1598b37a5456f4

      SHA256

      3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

      SHA512

      25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

    • /data/user/0/com.br.pizzamaker/shared_prefs/yteSlT7daYsGlbVGqXfR.xml

      Filesize

      2KB

      MD5

      52d32ab73bdba7357f1254573a6b3d27

      SHA1

      c52e4da69a91713416928aa73adaa2df696c5660

      SHA256

      12213fd0383bac08979c1a5e0da7c3da9c91031d52b00ab8f3309341ca04d5c0

      SHA512

      17adbc01df5af8b676fa17e4acb5d2b269883453d5b8cada6f24cf629b0eace0a959836aaa0f382f8171ca25db0affc8f48f59bc140a38b93492fae3f59aa95d

    • /data/user/0/com.br.pizzamaker/shared_prefs/yteSlT7daYsGlbVGqXfR.xml

      Filesize

      4KB

      MD5

      b49170337b8ebed6ba2a99395c06e9fe

      SHA1

      6405454a196e5cd0456b80f221bda72fa78d14a2

      SHA256

      2fdff7dde3e58827ae5aa6e715717baea46022422a76c566d0faef25d7ea26f9

      SHA512

      6c85c4d5d339d804ea87cdaabf3c6909135dad5221ce1109c3a7bc34e302f8375e007e1e016182a748d227172f59854d77b646aeb7e708009ef3b38ab38833e7